Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in xxlsxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yellorq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinacne (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfniance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinancee (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinannce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xx-ent-wiki-sm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yelp-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yelp-cgeom1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinnance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yeahmankema (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinnace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfiance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfnance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinanec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yhaplo1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfiannce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xyq-drama-skill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xxoo-bale (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xxx-bale (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfiinance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xorg-renderproto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloyuaezcqixu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloxwmellxliq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloowlowpzeke (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolowqffntthtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xologrekjlqzxj (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolosafhpodvqo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xsxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolodyntlnewtp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloeduccelifz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolobzvfburelm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xololcuakbzbuu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolojgmnizxche (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolosamsdyhcfa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolofyxkotqwko (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolojhzyppbsow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xsltproc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloftiqwxxhje (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xsilyxd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloulfkhiyywc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolotcgstfiguu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolofmdvxqvbmp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolobwritbrulv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolomjqalvrpmp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolojbxzzttwpk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolovqryjphftd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolosxelwsesnp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolonavrylpbeb (PyPI)
1 compromised version
Page 18 of 479